Methods to Support Dynamic Transit Paths Through Hub Clustering Across Branches in Sd-WAN

2. The method of claim 1, wherein the data messages are forwarded through the first hub router.

3. The method of claim 1, wherein the master hub router acts as a transit node for end-to-end VPN tunnels from the first site to the second site.

4. The method of claim 3, wherein data sent between the first site and the second site does not leave a VPN tunnel to pass through an underlying network outside of the VPN tunnels.

5. The method of claim 1, wherein each site of the plurality of sites is connected to only one hub router in the hub cluster.

6. The method of claim 1, wherein at least two sites of the plurality of sites are directly connected to the master hub router, wherein each site is connected to the master hub router through a VPN tunnel.

7. The method of claim 1, wherein no sites are directly connected to the master hub router.

8. The method of claim 1, wherein the master hub router is a first master hub router of the hub cluster, the method further comprising assigning a second hub router a second master hub router of the hub cluster.

10. The method of claim 9, wherein the assignment of routes is based on loads on at least one of the first master hub router and the second master hub router.

11. The method of claim 9, wherein a first route from a particular site of a third hub router to a site of a fourth hub router is assigned to pass through the first master hub router and a second route from the particular site of the third hub router to a site of a fifth hub router is assigned to pass through the second master hub router.

12. The method of claim 1, wherein using the master hub router that has VPN tunnels to the other hub routers of the hub cluster reduces a number of VPN tunnels between hub routers because using the master hub router does not require each hub router of the hub cluster to set up a VPN tunnel to each other hub router of the hub cluster.

14. The non-transitory machine readable medium of claim 13, wherein the data messages are forward through the first hub of the other hubs.

15. The non-transitory machine readable medium of claim 13, wherein the master hub acts as a transit node for end-to-end VPN tunnels from the first site to the second site.

16. The non-transitory machine readable medium of claim 15, wherein data sent between the first site and the second site does not leave a VPN tunnel to pass through an underlying network outside of the VPN tunnels.

17. The non-transitory machine readable medium of claim 13, wherein each site of the plurality of sites is connected to only one hub in the hub cluster.

18. The non-transitory machine readable medium of claim 13, wherein at least two sites of the plurality of sites are directly connected to the master hub, wherein each site is connected to the master hub through a VPN tunnel.

19. The non-transitory machine readable medium of claim 13, wherein no sites are directly connected to the master hub.

20. The non-transitory machine readable medium of claim 13, wherein the master hub is a first master hub of the hub cluster, the program further comprising sets of instructions for assigning a second hub as a second master hub of the hub cluster.